Skip to main content

Notifications

Power Apps - Building Power Apps
Unanswered

Building Powerapps and using sharepoint List as database facing security issue.

(0) ShareShare
ReportReport
Posted on by

Hello Everyone, i m new to power platform.
i have created a PowerApps application that uses SharePoint lists as a database.
I use a form to take data from the PowerApps application and store it on a SharePoint list. This application will be utilized by everyone in the organization, so all end users of the application must be added to the SharePoint list as members in order to view the relevant data when filling out the form and storing it in the database.

However, as a member, they can view and edit the data. However, i do not want them to be able to modify the data directly in the SharePoint list.

if you can help with following alternatives -:

  1. Not viewing the site in the SharePoint list. However, using the PowerApps application, it is possible to create data in the SharePoint List site.
  2. can view the data and create the data in SharePoint List but, cannot modify the data of SharePoint list.
  3. Restrict the user's access to redirect the SharePoint list through the MS team channel. – open in SharePoint web

    Prathamesh2415_0-1706870797171.png

    i tried creating the permission by 
    Setting -> Site Permissions -> Advance Permission Settings.

    i created group with following permission -
    List permission :

    Prathamesh2415_1-1706871094939.png


    Site Permissions :

    Prathamesh2415_2-1706871144189.png

     

    However, users can still edit the data. I'm not sure if I set it up right. 

  • elseb Profile Picture
    elseb 758 on at
    Re: Building Powerapps and using sharepoint List as database facing security issue.

    Hi,

     

    This is unfortunate limitation of SPlist as a database, 

    -I've used flows that allow hiding the list so well it's virtually impossible to get to it after running the flows.

    -You can set the splist to make records only available to the creator, this is very limited application I think unless you combine it with a flow that will duplicate the records into another list available only to the admins.

    - I believe you can use dataverse without premium inside of ms teams environment which would solve all the security issues, but i understand not everyone can limit the app to work in teams.

     

    I hope someone found a way to solve it honestly. I love SPlists and it would be great if they were more secure in this way. I have premium but not using much dataverse as in large company the premium licenses are not viable sometimes especially if hundreds of users will use only one or two apps.

     

    Seb

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Microsoft Kickstarter Events…

Register for Microsoft Kickstarter Events…

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Announcing Forum Attachment Improvements!

We're excited to announce that attachments for replies in forums and improved…

Leaderboard

#1
WarrenBelz Profile Picture

WarrenBelz 145,580

#2
RandyHayes Profile Picture

RandyHayes 76,287

#3
Pstork1 Profile Picture

Pstork1 64,909

Leaderboard